?
Solved

Yahoo/bellsouth.net reports my sender as a possible fraud/spoof following an on-premises Exchange to Office 365 Exchange Cutover Migration

Posted on 2016-11-10
3
Medium Priority
?
118 Views
Last Modified: 2016-11-22
Recently completed an on-premises Exchange to Office 365 hosted Exchange cutover migration. Everything went as advertised and the company is using hosted Exchange without issues. The on-premises Exchange server has been shut down since the migration. The one issue I'm having: When someone sends an email from the company domain to one of the employees' PERSONAL bellsouth.net account, the bellsouth.net account holder gets the email, but then gets another email saying (see graphic): This sender failed our fraud detection checks and may not be who they appear to be. I reviewed the DNS records for the company domain and found a legacy SRV mail protection record and a mail A record related to the on-premises Exchange server, which I have since deleted. But even after a day or so allowing for propagation, the problem persists. Thoughts?
yahoo-emailerr.JPG
0
Comment
Question by:tcianflone
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 14

Accepted Solution

by:
Schnell Solutions earned 2000 total points
ID: 41882722
Hello,

You are going on the good track. Because the problem is really related to anti spam checks and revisions, I believe that it is what you just reconfigured correctly: The ID Filtering / SPF that are validated with the TXT record in your DNS zone.

Additionally, like you stated, it usually takes from 0 to 3 days. However, some anti spam solutions store information locally for some additional time.

Try to check if there is a process (usually it is done online), where you can contact the destination domain messaging administrators, and complete any additional action to take you out from possible block lists in 'their systems'.
0
 
LVL 1

Author Comment

by:tcianflone
ID: 41886906
So, it's been a week now and this is still happening. The DNS zone looks fine to me, like every other Office 365 hosted Exchange service I have ever set up. And bellsouth.net is the ONLY email service complaining about it. Can anyone provide a link to where I can report this to AT&T email admins? That company is so huge, I can't imagine actually finding the right place to report something like this.
0
 
LVL 14

Expert Comment

by:Schnell Solutions
ID: 41888062
You can start here...

http://rbl.att.net/block_inquiry.html

There are many links for many tasks, i.e. Tools for administrators or mail systems whose messages has been blocked.
0

Featured Post

Four New Appliances. Same Industry-leading Speeds.

But don't take it from us.  The Firebox M370 is Miercom tested and Miercom approved, outperforming its competitors for stateless and stateful traffic throughput scenarios.  Learn more about the M370, M470, M570 and M670 and find the right solution for your organization today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Enabling the Skype for Business Meeting Scheduler in Hybrid OWA
I don't pretend to be an expert at this, but I have found a few things that are useful. I hope that sharing them here will help others, so they will not have to face some rather hard choices. Since I felt this to be a topic of enough importance and…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question